Assess the risk of third-party GitHub Actions
Examples: ,
Actions
Assess all the actions
aptos-labs/setup-buildx-action
GitHub Action to set up Docker Buildx
dustin4444/electron/src/electron/.github/actions/install-build-tools
:electron: Build cross-platform desktop apps with JavaScript, HTML, and CSS
step-security/mirror-branch
Mirror your new main branch to your old master branch (or mirror any branch A to any branch B). Secure drop-in replacement for zofrex/mirror-branch.
step-integration-tests/auto-pdpr-test-88903-15/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
rmacklin/fetch-through-merge-base
A GitHub Action for fetching PR commits through the merge-base
step-integration-tests/auto-pdpr-test-20565-14/.github/workflows/install-and-build
Test repository created from policy-based-prs template for integration testing
jgillis/delete-release-assets
GitHub action for deleting assets from a GitHub release.
envoyproxy/toolshed/actions/github/artifact/cache/id
step-security/docker-build-push-action/_next/static/chunks/24692-7d12a5de6cc02590.js
GitHub Action to build and push Docker images with Buildx. Secure drop-in replacement for docker/build-push-action.
anchore/stereoscope/.github/actions/bootstrap
go library for processing container images and simulating a squash filesystem
ministryofjustice/hmpps-temporary-accommodation-ui/.github/actions/image
The user interface for the Temporary Accommodation Service
step-security/action-actionlint/dockerless
run actionlint with reviewdog. Secure drop-in replacement for reviewdog/action-actionlint.
step-security/add-pr-comment/_next/static/chunks/40300-e26a046d4034a815.js
GitHub Action which adds a comment to a pull request's issue. Secure drop-in replacement for mshick/add-pr-comment.
ministryofjustice/laa-info-and-advice-datastore/.github/actions/deploy
Info & Advice Datastore
caffeelake/external-secrets/.github/actions/e2e-managed
External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.
stakekit/safe-wallet-web/.github/workflows/cypress
Safe{Wallet} – smart contract wallet for Ethereum (ex-Gnosis Safe multisig)
softprops/action-gh-release/_next/static/chunks/f1bddbd1-f81489e8995da509.js
📦 :octocat: GitHub Action for creating GitHub Releases
grafana/writers-toolkit/actions/fill
Technical documentation guidelines for Grafana Labs documentation
launchdarkly/opencensus-go-exporter-stackdriver/.github/actions/get-go-version
OpenCensus Go exporter for Stackdriver Monitoring and Trace